Description

Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.

Remediation

References

CVE-2007-1824

Related Vulnerabilities

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36398)

WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.6.3)

OpenSSL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2018-5407)

WordPress Plugin ThemeREX Addons Remote Code Execution (All)

WordPress Plugin Mimetic Books Cross-Site Scripting (0.2.13)

Severity

Medium

Classification

CVE-2007-1824

Tags

Missing Update Known Vulnerabilities